Disable CSRF to match PHP app
Show a message if the log in fails
Rename template
Correct parameter name
Explicitly render login view when login fails
Only render the login template if the user hasn't hit submit
Add static account settings page
Show if you're logged in on the account navbar
Make static things on the account navbar dynamic
Add dynamic redirect link